Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BF0ABD6DAF711EFBA9BBA47762E951A.roa
File: 9BF0ABD6DAF711EFBA9BBA47762E951A.roa (raw, json)
Hash identifier: pyOHINXTgSzWKDDNcIrQ4yrWJNeU3sQEmcz+cFTn7ik=
Subject key identifier: 73:B1:69:6E:32:2A:A9:53:77:4F:52:F5:C3:C8:5C:13:3B:1C:98:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BF0ABD6DAF711EFBA9BBA47762E951A.roa
Signing time: Sat 25 Jan 2025 08:37:28 +0000
ROA not before: Sat 25 Jan 2025 08:37:24 +0000
ROA not after: Sun 30 Mar 2025 08:37:24 +0000
asID: 63139
IP address blocks: 154.94.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84223 (0x148ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 08:37:24 2025 GMT
Not After : Mar 30 08:37:24 2025 GMT
Subject: CN=6794a2c8-bffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:b7:7b:5f:29:6e:c4:41:79:83:9b:59:19:
27:5b:51:78:91:89:17:33:93:28:e7:4e:dc:1b:a9:
05:8e:da:af:cc:c3:be:b2:c1:cc:c0:fa:3e:ea:f7:
e8:ee:99:a4:dc:7d:cb:6e:13:e8:89:54:f2:d6:a3:
e0:6b:4d:27:d7:04:89:46:e2:72:a7:9d:1b:90:a4:
18:f1:6c:22:49:ac:c2:3c:c8:ea:cd:51:ce:93:b8:
84:f5:68:6a:82:04:71:6c:56:3c:6c:80:fd:a7:9c:
88:36:8e:4f:53:f2:e2:48:e2:a5:37:06:23:5d:95:
14:4e:a6:e2:42:aa:0e:86:f8:c8:a9:98:b9:ae:fd:
4d:50:05:78:7c:d7:c0:c2:1e:93:4f:58:06:6a:91:
b5:60:f7:80:59:f4:a6:dd:74:7c:97:81:b6:97:8b:
24:f8:08:88:e6:51:e5:7d:bf:52:ab:60:49:d1:d4:
34:ce:a6:c7:ca:12:1c:47:24:bb:c0:ff:7d:f7:6f:
f5:af:cf:d2:74:ee:d4:4c:8f:33:48:fd:2c:95:2f:
a8:1a:22:73:ce:1c:5c:32:0c:04:52:d4:cc:5f:ac:
65:c8:ef:5f:e6:8f:37:a5:6f:10:ea:1a:90:50:59:
6a:74:48:9a:8d:d7:f8:a1:6b:cb:4b:a6:c1:ae:a0:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B1:69:6E:32:2A:A9:53:77:4F:52:F5:C3:C8:5C:13:3B:1C:98:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BF0ABD6DAF711EFBA9BBA47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.106.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:9d:24:5d:90:8e:18:b6:82:3d:61:da:28:34:c2:48:3b:ff:
44:a9:e9:be:db:9f:e2:e7:5a:19:d4:53:f2:54:ca:95:13:65:
d7:02:b3:28:fb:c3:e0:0c:92:56:1a:d3:fa:e9:33:8d:cb:a5:
ab:e8:33:d1:cc:6b:2d:b9:11:29:a3:f8:46:8d:91:91:1b:43:
70:de:f0:0b:d7:2f:95:2c:4a:85:0b:cc:0d:23:83:2f:2c:ad:
96:c4:f5:28:2f:04:83:39:a4:c5:2b:c0:63:62:0d:f0:e5:21:
52:8f:f6:fc:f4:0e:c9:77:12:36:f8:fd:6e:ee:05:fb:a6:eb:
74:43:54:f2:8a:16:1d:22:32:3c:34:1f:96:bc:00:e6:cf:1a:
37:b4:b7:5f:af:36:2c:25:66:96:a8:1f:de:32:36:7c:ce:81:
c3:2a:90:98:82:3f:7b:d9:84:ac:ac:c0:19:08:38:d8:d3:6b:
70:47:de:10:d9:51:45:43:ce:c6:20:ea:eb:e5:c0:97:35:5a:
21:4e:c2:54:f6:33:83:6f:d1:ce:b2:88:d3:e2:66:06:50:fd:
01:8d:c7:e7:4c:71:39:37:a9:d7:af:1f:ab:5c:df:27:ea:7f:
28:7b:64:cd:97:9f:ce:82:73:b1:70:11:a6:e1:07:27:bd:fa:
db:c7:95:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUj/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MDgzNzI0WhcNMjUwMzMwMDgzNzI0WjAYMRYw
FAYDVQQDEw02Nzk0YTJjOC1iZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw2m3e18pbsRBeYObWRknW1F4kYkXM5Mo507cG6kFjtqvzMO+ssHMwPo+
6vfo7pmk3H3LbhPoiVTy1qPga00n1wSJRuJyp50bkKQY8WwiSazCPMjqzVHOk7iE
9WhqggRxbFY8bID9p5yINo5PU/LiSOKlNwYjXZUUTqbiQqoOhvjIqZi5rv1NUAV4
fNfAwh6TT1gGapG1YPeAWfSm3XR8l4G2l4sk+AiI5lHlfb9Sq2BJ0dQ0zqbHyhIc
RyS7wP9992/1r8/SdO7UTI8zSP0slS+oGiJzzhxcMgwEUtTMX6xlyO9f5o83pW8Q
6hqQUFlqdEiajdf4oWvLS6bBrqCW0QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHOx
aW4yKqlTd09S9cPIXBM7HJhwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QkYwQUJENkRBRjcxMUVGQkE5QkJBNDc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5qMA0GCSqGSIb3DQEB
CwUAA4IBAQC/nSRdkI4YtoI9YdooNMJIO/9Eqem+25/i51oZ1FPyVMqVE2XXArMo
+8PgDJJWGtP66TONy6Wr6DPRzGstuREpo/hGjZGRG0Nw3vAL1y+VLEqFC8wNI4Mv
LK2WxPUoLwSDOaTFK8BjYg3w5SFSj/b89A7JdxI2+P1u7gX7put0Q1TyihYdIjI8
NB+WvADmzxo3tLdfrzYsJWaWqB/eMjZ8zoHDKpCYgj972YSsrMAZCDjY02twR94Q
2VFFQ87GIOrr5cCXNVohTsJU9jODb9HOsojT4mYGUP0BjcfnTHE5N6nXrx+rXN8n
6n8oe2TNl5/OgnOxcBGm4Qcnvfrbx5VS
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:03:46 2025 by rpki-client